It being installed without user consent is pretty shitty, but this whole time I was under the impression that it was enabled by default, which is insane.

If it wasn't in fact enabled, it's still dumb, but to me a misstep in respecting the user and not a complete breach of trust.